$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133342e302f32342d3234203d3e203538343737.roa File: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: Ck6aITpQS3jNB2+7J4CBgWiBG1E6aY7DXdeahHEEyTg= Subject key identifier: 9B:BA:EF:21:B0:55:61:2C:B2:7B:5E:69:87:6D:36:86:0B:DF:BA:72 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 3E9E8F018544EFC8CC0BC4DFB23F9D41BCD0280F Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133342e302f32342d3234203d3e203538343737.roa Signing time: Mon 31 Jul 2023 00:14:33 +0000 ROA not before: Mon 31 Jul 2023 00:09:33 +0000 ROA not after: Mon 29 Jul 2024 00:14:33 +0000 asID: 58477 IP address blocks: 45.127.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9e:8f:01:85:44:ef:c8:cc:0b:c4:df:b2:3f:9d:41:bc:d0:28:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jul 31 00:09:33 2023 GMT Not After : Jul 29 00:14:33 2024 GMT Subject: CN=9BBAEF21B055612CB27B5E69876D36860BDFBA72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:80:da:4f:9e:1b:fd:3f:82:0c:0f:49:15: 22:df:6d:28:3a:c7:21:2f:a6:f6:6c:1b:85:16:d5: 5a:ff:7d:66:a8:ba:d9:50:98:e2:2c:79:16:dd:0c: a7:62:1c:eb:e5:0d:d2:1c:33:2d:8e:e6:bd:70:cd: 5c:b2:4f:05:3a:f0:81:9d:d8:b2:c5:fb:e5:4d:3f: 9c:59:f1:68:99:0d:05:26:0c:d1:22:b2:b3:7d:94: 29:02:f9:bd:b2:09:2c:55:39:b8:02:7a:7f:32:79: cb:19:dd:90:12:7b:b9:08:32:ce:68:55:89:d7:02: 2b:d3:d8:ca:43:5f:77:70:03:a6:4a:c0:bd:40:46: b0:93:4b:94:84:d1:5f:5b:0d:24:75:aa:dc:8c:64: 97:c2:ac:0a:40:fe:d4:52:9a:18:f2:75:86:c8:e1: bf:5e:62:cb:bc:04:c1:db:d1:a9:8b:c9:93:46:13: 98:c4:57:4c:1c:e4:cb:eb:ab:78:63:eb:89:1b:14: 5f:13:3b:47:81:20:c5:96:e2:e5:8c:85:15:4b:30: f9:d6:78:53:26:1a:ff:80:6f:c1:71:d7:34:f9:60: 6e:5f:f1:f8:ca:92:bd:22:e3:da:9b:51:61:c1:d0: 4c:77:d7:ff:b3:b0:e8:96:4d:76:5d:da:cf:af:cc: 38:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BA:EF:21:B0:55:61:2C:B2:7B:5E:69:87:6D:36:86:0B:DF:BA:72 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133342e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.127.134.0/24 Signature Algorithm: sha256WithRSAEncryption a7:3e:50:1c:3a:3f:3a:94:28:c4:eb:32:92:1a:46:5e:ae:a3: 58:2a:fb:53:92:0c:f5:64:10:84:7a:a6:49:b0:58:7c:d2:ca: f7:18:6a:5e:b6:ca:4f:70:36:7d:57:bd:9a:a8:a5:8e:e9:fc: a2:65:26:d9:11:e9:ef:c1:34:95:2e:52:db:24:0a:60:83:1a: df:d3:51:70:3f:1f:78:52:bd:d8:da:cd:fa:d9:59:e1:dd:22: bd:8b:d9:be:29:2f:a3:15:b1:aa:da:27:24:73:f0:0c:f6:c8: 29:50:7c:14:1c:ce:21:1a:32:1a:a0:e3:2c:55:ee:af:b6:6f: e6:f4:f9:a1:9c:4f:d3:9e:67:6c:05:f8:c9:c0:7b:4e:c3:9e: 13:f3:32:79:ef:ff:ae:19:91:d6:98:a4:e9:e7:09:da:45:5c: 09:e0:ff:b1:c7:55:5a:60:8d:11:5c:92:d8:e5:4e:a2:9b:98: 24:6a:2b:70:01:e1:f8:d9:d4:bd:c9:dc:d9:61:1b:0c:d8:6c: d3:00:4e:c3:47:c3:82:35:87:c6:d9:ae:19:91:34:7a:64:d3: 0d:df:a1:cc:a6:e7:17:92:14:0c:82:ad:84:b3:9b:e5:e5:b6: 47:2e:5a:e0:12:16:61:d5:51:57:6f:ee:df:dc:d8:06:70:2a: ef:b9:15:c8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPp6PAYVE78jMC8Tfsj+dQbzQKA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yMzA3MzEwMDA5MzNaFw0yNDA3MjkwMDE0MzNaMDMxMTAvBgNV BAMTKDlCQkFFRjIxQjA1NTYxMkNCMjdCNUU2OTg3NkQzNjg2MEJERkJBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeeoDaT54b/T+CDA9JFSLfbSg6 xyEvpvZsG4UW1Vr/fWaoutlQmOIseRbdDKdiHOvlDdIcMy2O5r1wzVyyTwU68IGd 2LLF++VNP5xZ8WiZDQUmDNEisrN9lCkC+b2yCSxVObgCen8yecsZ3ZASe7kIMs5o VYnXAivT2MpDX3dwA6ZKwL1ARrCTS5SE0V9bDSR1qtyMZJfCrApA/tRSmhjydYbI 4b9eYsu8BMHb0amLyZNGE5jEV0wc5Mvrq3hj64kbFF8TO0eBIMWW4uWMhRVLMPnW eFMmGv+Ab8Fx1zT5YG5f8fjKkr0i49qbUWHB0Ex31/+zsOiWTXZd2s+vzDgZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUm7rvIbBVYSyye15ph202hgvfunIwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzM0MzUyZTMxMzIzNzJlMzEzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1/hjANBgkqhkiG 9w0BAQsFAAOCAQEApz5QHDo/OpQoxOsykhpGXq6jWCr7U5IM9WQQhHqmSbBYfNLK 9xhqXrbKT3A2fVe9mqiljun8omUm2RHp78E0lS5S2yQKYIMa39NRcD8feFK92NrN +tlZ4d0ivYvZvikvoxWxqtonJHPwDPbIKVB8FBzOIRoyGqDjLFXur7Zv5vT5oZxP 055nbAX4ycB7TsOeE/Myee//rhmR1pik6ecJ2kVcCeD/scdVWmCNEVyS2OVOopuY JGorcAHh+NnUvcnc2WEbDNhs0wBOw0fDgjWHxtmuGZE0emTTDd+hzKbnF5IUDIKt hLOb5eW2Ry5a4BIWYdVRV2/u39zYBnAq77kVyA== -----END CERTIFICATE-----Generated at Mon May 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org